Warning: Permanently added '10.128.0.180' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 903.006939][ T34] audit: type=1400 audit(1607232147.731:8): avc: denied { execmem } for pid=8471 comm="syz-executor495" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 903.039328][ T8471] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 903.048322][ T8471] gfs2: fsid=syz:syz: Now mounting FS... [ 903.067043][ T8471] gfs2: fsid=syz:syz.0: fatal: invalid metadata block [ 903.067043][ T8471] bh = 2072 (magic number) [ 903.067043][ T8471] function = gfs2_meta_indirect_buffer, file = fs/gfs2/meta_io.c, line = 488 [ 903.107961][ T8471] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 903.126261][ T8471] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN [ 903.138017][ T8471] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 903.146444][ T8471] CPU: 1 PID: 8471 Comm: syz-executor495 Not tainted 5.10.0-rc6-syzkaller #0 [ 903.155921][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 903.166726][ T8471] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 903.172465][ T8471] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 62 8a fb f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 903.193065][ T8471] RSP: 0018:ffffc9000183f378 EFLAGS: 00010202 [ 903.199148][ T8471] RAX: dffffc0000000000 RBX: ffff888027bd8000 RCX: ffffffff88b5bb53 [ 903.207133][ T8471] RDX: 000000000000000e RSI: ffffffff88b5bb64 RDI: 0000000000000070 [ 903.215120][ T8471] RBP: ffff888027bd82c5 R08: 0000000000000038 R09: ffff8880b9f30627 [ 903.223106][ T8471] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027bd80a8 [ 903.231112][ T8471] R13: ffff888027bd8348 R14: ffffffff89900fa0 R15: 0000000000000000 [ 903.239127][ T8471] FS: 000000000146f880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 903.248074][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 903.254708][ T8471] CR2: 000055e9d77037a8 CR3: 0000000026c58000 CR4: 00000000001506e0 [ 903.262730][ T8471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 903.270712][ T8471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 903.278712][ T8471] Call Trace: [ 903.282111][ T8471] gfs2_meta_check_ii+0x68/0xa0 [ 903.286978][ T8471] gfs2_meta_indirect_buffer+0x3a3/0x3f0 [ 903.292639][ T8471] ? gfs2_journal_wipe+0xc00/0xc00 [ 903.297771][ T8471] gfs2_inode_refresh+0x95/0xdf0 [ 903.302751][ T8471] ? inode_go_sync+0x560/0x560 [ 903.307528][ T8471] ? lock_downgrade+0x6d0/0x6d0 [ 903.312392][ T8471] inode_go_lock+0x309/0x4a0 [ 903.316990][ T8471] do_promote+0x4a0/0xb70 [ 903.321333][ T8471] finish_xmote+0x671/0xe40 [ 903.325836][ T8471] do_xmote+0x821/0xbc0 [ 903.329978][ T8471] run_queue+0x323/0x680 [ 903.334217][ T8471] gfs2_glock_nq+0x70a/0x11a0 [ 903.338884][ T8471] gfs2_lookupi+0x314/0x630 [ 903.343371][ T8471] ? gfs2_lookup_by_inum+0x100/0x100 [ 903.348639][ T8471] ? gfs2_lookupi+0x30c/0x630 [ 903.353303][ T8471] ? crc32_body+0x348/0x5f0 [ 903.358665][ T8471] gfs2_lookup_simple+0x99/0xe0 [ 903.363510][ T8471] ? gfs2_lookupi+0x630/0x630 [ 903.368170][ T8471] ? enable_ptr_key_workfn+0x30/0x30 [ 903.373453][ T8471] init_inodes+0x3cb/0x2650 [ 903.378893][ T8471] ? do_raw_spin_lock+0x120/0x2b0 [ 903.383917][ T8471] ? vsnprintf+0x2cc/0x14f0 [ 903.388416][ T8471] ? end_bio_io_page+0x100/0x100 [ 903.393422][ T8471] ? pointer+0x930/0x930 [ 903.397646][ T8471] ? gfs2_glock_dq_uninit+0x87/0x100 [ 903.402908][ T8471] ? init_sb+0x9c6/0xd30 [ 903.407134][ T8471] ? snprintf+0xbb/0xf0 [ 903.411267][ T8471] ? vsprintf+0x30/0x30 [ 903.415498][ T8471] ? gfs2_read_super+0x1140/0x1140 [ 903.420613][ T8471] ? __debugfs_create_file+0x33d/0x4c0 [ 903.426060][ T8471] gfs2_fill_super+0x199c/0x23f0 [ 903.430992][ T8471] ? gfs2_reconfigure+0x1030/0x1030 [ 903.436191][ T8471] ? lock_downgrade+0x6d0/0x6d0 [ 903.441038][ T8471] ? gfs2_glock_nq_num+0xf9/0x240 [ 903.446053][ T8471] ? snprintf+0xbb/0xf0 [ 903.450196][ T8471] ? vsprintf+0x30/0x30 [ 903.454345][ T8471] ? wait_for_completion+0x260/0x260 [ 903.460066][ T8471] ? set_blocksize+0x1c1/0x400 [ 903.464826][ T8471] get_tree_bdev+0x421/0x740 [ 903.469418][ T8471] ? gfs2_reconfigure+0x1030/0x1030 [ 903.474646][ T8471] gfs2_get_tree+0x4a/0x270 [ 903.479284][ T8471] vfs_get_tree+0x89/0x2f0 [ 903.483686][ T8471] path_mount+0x13ad/0x20c0 [ 903.488188][ T8471] ? strncpy_from_user+0x2a0/0x3e0 [ 903.493291][ T8471] ? finish_automount+0xac0/0xac0 [ 903.498309][ T8471] ? getname_flags.part.0+0x1dd/0x4f0 [ 903.503678][ T8471] __x64_sys_mount+0x27f/0x300 [ 903.508462][ T8471] ? copy_mnt_ns+0xa60/0xa60 [ 903.518444][ T8471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 903.524337][ T8471] do_syscall_64+0x2d/0x70 [ 903.528753][ T8471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 903.534641][ T8471] RIP: 0033:0x45b4ca [ 903.538531][ T8471] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 903.564392][ T8471] RSP: 002b:00007fffbd56c618 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 903.572974][ T8471] RAX: ffffffffffffffda RBX: 00007fffbd56c670 RCX: 000000000045b4ca [ 903.580940][ T8471] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fffbd56c630 [ 903.588906][ T8471] RBP: 00007fffbd56c630 R08: 00007fffbd56c670 R09: 00007fff00000015 [ 903.596879][ T8471] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000091c [ 903.604845][ T8471] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 903.612811][ T8471] Modules linked in: [ 903.617002][ T8471] ---[ end trace b3d4db9dd30ecf8b ]--- [ 903.622483][ T8471] RIP: 0010:gfs2_withdraw.cold+0xff/0xc14 [ 903.628405][ T8471] Code: 00 48 c1 e0 2a 80 3c 02 00 0f 85 1c 02 00 00 4c 8b bb 08 09 00 00 b8 ff ff 37 00 48 c1 e0 2a 49 8d 7f 70 48 89 fa 48 c1 ea 03 <80> 3c 02 00 74 05 e8 62 8a fb f8 4d 8b 7f 70 b8 ff ff 37 00 48 c1 [ 903.648084][ T8471] RSP: 0018:ffffc9000183f378 EFLAGS: 00010202 [ 903.654171][ T8471] RAX: dffffc0000000000 RBX: ffff888027bd8000 RCX: ffffffff88b5bb53 [ 903.662181][ T8471] RDX: 000000000000000e RSI: ffffffff88b5bb64 RDI: 0000000000000070 [ 903.670219][ T8471] RBP: ffff888027bd82c5 R08: 0000000000000038 R09: ffff8880b9f30627 [ 903.678244][ T8471] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027bd80a8 [ 903.686263][ T8471] R13: ffff888027bd8348 R14: ffffffff89900fa0 R15: 0000000000000000 [ 903.694234][ T8471] FS: 000000000146f880(0000) GS:ffff8880b9f00000(0000) knlGS:0000000000000000 [ 903.703198][ T8471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 903.709828][ T8471] CR2: 000055e9d77037a8 CR3: 0000000026c58000 CR4: 00000000001506e0 [ 903.717849][ T8471] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 903.725838][ T8471] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 903.733839][ T8471] Kernel panic - not syncing: Fatal exception [ 903.740452][ T8471] Kernel Offset: disabled [ 903.744782][ T8471] Rebooting in 86400 seconds..